CVE-2024-55885
Beego Vulnerable to Collision Hazards of MD5 in Cache Key Filenames
Summary
Beego Vulnerable to Collision Hazards of MD5 in Cache Key Filenames
Original description
The description as published by the source.
beego is an open-source web framework for the Go programming language. Versions of beego prior to 2.3.4 use MD5 as a hashing algorithm. MD5 is no longer considered secure against well-funded opponents due to its vulnerability to collision attacks. Version 2.3.4 replaces MD5 with SHA256.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
References
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com